Red Hat Security AdvisoryRHSA-2016:1978
python-twisted-web security update
Released 2016-09-29 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client Optional (v. 7) python-twisted-web-12.1.0-5.el7_2
- Red Hat Enterprise Linux Desktop (v. 6) python-twisted-web-8.2.0-5.el6_8
- Red Hat Enterprise Linux Server (v. 6) python-twisted-web-8.2.0-5.el6_8
- Red Hat Enterprise Linux Server Optional (v. 7) python-twisted-web-12.1.0-5.el7_2
- Red Hat Enterprise Linux Workstation (v. 6) python-twisted-web-8.2.0-5.el6_8
- Red Hat Enterprise Linux Workstation Optional (v. 7) python-twisted-web-12.1.0-5.el7_2
Fixes 1 record
Priority LOW 29
Twisted before 16.3.1 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect CGI applications from the presence of untrusted client data in the HTTP_PROXY environment varia…
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.02762 · Published 2020-03-11 · Fixed in 16.3.1 CWE-425
